CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- xymon, debian linux +1 moreIn Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component...9.8 Critical
- xymon, debian linux +1 moreIn Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer...9.8 Critical
- xymon, debian linux +1 moreIn Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of ...9.8 Critical
- xymon, debian linux +1 moreIn Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert...9.8 Critical
- xymon, debian linux +1 moreIn Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c.9.8 Critical
- xymon, debian linux +1 moreIn Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c.9.8 Critical
- xymon, debian linux +1 moreIn Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to...6.1 Medium
- xymon, debian linux +1 moreIn Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The...9.8 Critical
- cdemu libmiragefilters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not...7.8 High
- blake2 blake2-rustAlgorithms compute incorrect results in blake29.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreAn issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5...7.5 High
dkgpgSUSE,libTMCGSUSE +1 moreRecommended update for dkgpg, libTMCGNo score- string-interner project string-internerUse after free in string-interner7.5 High
- watchguard firewareThe authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this...6.1 Medium
- webtoffee import export wordpress usersThe webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress...7.3 High
- apache santuario - xml security for java, santuario xml security for java, oracle weblogic server +1 more +3 moreImproper input validation in Apache Santuario XML Security for Java5.5 Medium
- fortinet fortinacAn Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in...6.1 Medium
- fortinet fortimanagerLack of root file system integrity checking in Fortinet FortiManager VM application images of all...9.8 Critical
- fortinet fortiosAn information exposure vulnerability in FortiOS 6.2.0 and below may allow an unauthenticated...5.3 Medium
- fortinet fortirecorder, fortirecorder firmware +1 moreUse of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow...9.8 Critical
- fortinet fortios ips engineMultiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the...5.9 Medium
- autodesk autocad, autocad architecture, autocad electrical +8 more +10 moreDLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel,...7.8 High
- autodesk design reviewUse-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An...7.8 High
- autodesk design reviewDLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An...7.8 High
- youracclaim acclaimThe Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via delete_records.9.8 Critical
- cesnet proxystatisticsSQL Injection in SimpleSAMLphp9.8 Critical
- hostosm tasking managerTasking Manager before 3.4.0 allows SQL Injection via custom SQL.9.8 Critical
- micro focus verastream host integratorA path traversal vulnerability has been identified in Verastream Host Integrator8.6 High
- paloaltonetworks twistlockEscalation of privilege vulnerability in the Palo Alto Networks Twistlock console 19.07.358 and...8.0 High
- palo alto networks pan-osMemory corruption in PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow an...7.2 High
- palo alto networks pan-osPAN-OS: Remote code execution vulnerability in the PAN-OS SSH device management interface9.8 Critical
- palo alto networks pan-osMemory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and...9.8 Critical
- obdev little snitchLittle Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their...5.5 Medium
- obdev little snitchLittle Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the...5.5 Medium
- deeply project deeplyPrototype Pollution in deeply9.8 Critical
- set-value project set-valuePrototype Pollution in set-value9.8 Critical
- mixin-deep project mixin-deep, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +2 morePrototype Pollution in mixin-deep9.8 Critical
- httpieOpen Redirect in httpie8.8 High
- dlink dir-823g firmwareAn issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command...8.8 High
- dlink dir-823g firmwareAn issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command...8.8 High
- dlink dir-823g firmwareAn issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command...8.8 High
- dlink dir-823g firmwareAn issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command...8.8 High
- dlink dir-823g firmwareAn issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command...8.8 High
- gnu libextractor, debian linux, fedoraproject fedora +2 moreGNU Libextractor through 1.9 has a heap-based buffer over-read in the function...6.5 Medium
- pw3270 project pw3270There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1.8.1 High
- comelz quarkcomelz Quark before 2019-03-26 allows directory traversal to locations outside of the project...5.3 Medium
- jc21 nginx proxy managerjc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal.5.5 Medium
- swooleSwoole before 4.2.13 allows directory traversal in swPort_http_static_handler.5.3 Medium
- power-response project power-responsePower-Response before 2019-02-02 allows directory traversal (up to the application's main...9.8 Critical
- cuberiteCuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection...7.5 High
- Show moreLoading…